
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
A Modern Apple-style Local Session & Workspace Hub for DeepSeek Harness (DSH)
DeepSeek Harness (DSH) 本地会话与工作区管理工具。支持历史对话检索、工作区残留清理、批量删除与安全恢复。
在长期使用 DeepSeek Harness 时,容易遇到几个实际问题:
~/.dsh 磁盘目录下仍残留大量旧会话数据;dsh-prism 通过读取本地磁盘数据,提供了一个直观的本地 Web 控制台来集中处理这些需求。
~/.dsh/_trash/ 目录中按工作区分层备份,支持一键原样恢复,避免误删数据丢失。.md 文件,方便归档到知识库。只要安装了 Node.js (>= 18,推荐 >= 22 以支持原生 zstd 物理日志解压),直接在终端运行:
npx dsh-prism
系统会自动分配空闲端口并在默认浏览器中打开控制台。
# 指定端口运行
npx dsh-prism --port 8080
# 静默启动(不自动弹出浏览器,适合远程服务器或 SSH)
npx dsh-prism --port 8080 --no-open
# 查看帮助
npx dsh-prism --help
npm install -g dsh-prism
dsh-prism
工具默认读取用户主目录下的 ~/.dsh 数据:
~/.dsh/
├── sessions/ # DSH 物理会话数据流
├── storages/
│ ├── workspace.json # 工作区注册信息
│ └── session_projcache/ # 会话独立快照缓存
└── _trash/ # 安全回收站
└── workspaces/ # 按工作区分层存放已删会话
└── <工作区名>/
├── meta.json
└── sessions/
└── <会话标题>/
本项目采用 MIT License 协议。
FAQs
A Modern Apple-style Local Session & Workspace Hub for DeepSeek Harness (DSH)
The npm package dsh-prism receives a total of 10 weekly downloads. As such, dsh-prism popularity was classified as not popular.
We found that dsh-prism demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.